Indiana Employment Practices & Management Liability Insurance

Written and reviewed by Michael LaBarbera, licensed insurance agent · Last reviewed

Indiana community organizations should review management liability around program consolidation, volunteer authority, client records and employee plans. EPLI, D&O, cyber and fiduciary liability serve different purposes. A shared facility or common program name does not establish that every affiliate is insured, so compare the entity chart and decision-making roles with each proposal.

Key facts
QuestionAnswer
State employment lawIndiana Civil Rights Law, Ind. Code ch. 22-9-1: generally 6 or more employees, subject to statutory definitions and exemptions, including specified fraternal or religious nonprofits. [1]
Enforcement agencyIndiana Civil Rights Commission [2]
State charge-filing period180 days with the Indiana Civil Rights Commission [3]
Federal charge-filing guidanceYes — the EEOC Indianapolis office applies the 300-day deferral deadline for covered Indiana charges. [4]
Director indemnificationInd. Code ch. 23-17-22 (indemnification of nonprofit corporation directors) [5]
Plan oversightSelecting and monitoring service providers is part of the plan sponsor’s fiduciary review. [7]
Incident preparationA breach response should coordinate investigation, legal advice and communications. [8]

What management liability coverage do Indiana employers need?

For an Indiana community nonprofit combining two neighborhood programs, start with who will operate the combined service. A shared building, executive director or donation page does not establish whether the programs are one organization, separate affiliates or unrelated partners.

Map four activities to their own policy questions: staff selection and supervision, board approval and use of contributions, client and donor information, and employee-benefit arrangements. EPLI, D&O, cyber and fiduciary liability may each be relevant, but the package should not be presented as replacing premises, vehicle, professional or participant-related coverage.

Prepare an integration chart showing the legal entities, governing boards, paid workers, volunteer coordinators and systems. Mark decisions that remain with a partner organization. The purpose is to compare actual responsibility with insured definitions, not to imply that operational cooperation automatically transfers insurance. Keep known complaints and unresolved funding restrictions visible during the review rather than letting them disappear beneath the new program name.

Does a Indiana employer need EPLI?

Evaluate EPLI against the consolidation's interviews, supervisory appointments and changes in duties. Ask how the form treats paid program staff, volunteers, applicants and former employees rather than assuming every participant in the organization has the same insured status.

Indiana agency guidance describes the Civil Rights Law with a generally six-or-more-employee threshold, subject to statutory definitions and exemptions, the Indiana Civil Rights Commission and a 180-day filing period with that commission. It separately records a 300-day EEOC deferral period for covered Indiana charges. These facts do not resolve every allegation, and neither legal period establishes the insurer's notice deadline.

Retain the staffing criteria, interview records and complaint communications used during integration. Compare administrative-charge coverage, defense arrangements and employment-related exclusions. If one partner employed the affected worker before consolidation, identify that history explicitly. A new supervisor's involvement does not alone answer which entity or policy period is relevant to the allegations.

Sources: [1] [2] [4]

Indiana EPL insurance guide

Do Indiana nonprofits need D&O insurance?

For an Indiana nonprofit, D&O review should follow the consolidation vote, restricted contributions, partner agreements and authority delegated to program leaders. Consider both individuals and the organization rather than purchasing solely for the board chair's name.

That does not establish that every consolidation decision qualifies or that insurance defense expenses will be advanced. Counsel's analysis of the statute and governing documents is separate from the insurer's obligations under the proposed form.

Preserve the board packet, disclosed conflicts and reasons for choosing the operating model. Ask how member or former-director demands are treated, whether entity coverage fits the nonprofit and whether defense costs reduce a shared aggregate. A grant repayment request and an allegation of governance misconduct are not necessarily the same covered loss. Review the actual requested remedy rather than assuming a D&O policy reimburses program funding.

Sources: [5]

Indiana D&O insurance guide

What does Indiana law require after a data breach?

It does not support a universal deadline or a conclusion that every client-record incident triggers notice. Obtain a factual and legal assessment before making a specific notification decision.

During program consolidation, inventory intake forms, donor systems, volunteer rosters and employee records separately. A combined mailing list may be easy to create while obscuring which organization collected each field and which users should retain access. Record the migration steps and old-system shutdown plan rather than assuming the new platform contains the only copies.

Compare approved response vendors, restoration and privacy-liability terms. Ask whether the proposed cyber policy includes the actual affiliates and hosted intake platform. A partner's agreement to administer the database is not proof that the partner's insurance covers the nonprofit. Review fraudulent donation instructions separately from ordinary data-restoration costs and avoid describing every loss of fundraising revenue as insured interruption.

Sources: [6]

Indiana cyber insurance guide

What should Indiana retirement plan sponsors know about fiduciary liability?

Consolidating programs should prompt a factual inventory of employee plans: names, sponsors, participating entities, service providers and committee members. Do not assume that moving staff into one payroll system automatically combines plan histories or places all plans within a proposed policy.

Ask how fiduciary coverage addresses specified plan-management allegations and how that differs from administrative-error protection. Record who selects providers, receives reports and approves corrections. A volunteer treasurer may have a different function from the payroll coordinator; titles alone do not explain the activities being offered for insurance.

Compare schedules, prior acts, insured people and defense terms with appropriate advisers. If one program previously used another organization's arrangements, retain those documents for review. The goal is an accurate submission and clear policy comparison, not a promise that all integration-related benefit complaints are insured.

Indiana fiduciary insurance guide

How should a nonprofit record authority during a program consolidation?

Prepare an authority matrix showing who can hire, approve spending, access client information and speak for the combined program. Distinguish board approval from day-to-day delegation, and identify decisions that require a partner's participation.

Provide coordinators with the current version rather than relying on informal understandings developed before consolidation. Preserve the approval trail when authority changes. A volunteer who has historically arranged transportation or accepted donations may continue acting unless the operational transition is explained clearly; insurance review should reflect those actual practices.

Use the matrix to test insured-person and entity definitions with the broker. Ask whether committees or volunteer leaders need additional clarification in the proposal. An internal delegation document does not amend a policy or establish statutory protection. Its practical value is showing where decisions occur and helping the organization avoid describing itself differently to donors, staff, partner organizations and prospective insurers.

What should happen before client and donor databases are combined?

Identify the purpose of each proposed transfer, the fields involved and the people who need access. Keep program eligibility information distinct from fundraising contacts unless there is a documented operational reason to combine them.

Prepare an inventory of exports, backups and vendor accounts so the old platform is not forgotten after migration. Test whether departed staff and former volunteers can still log in. Assign responsibility for vendor escalation and preserve a way to contact the response team outside the shared database.

Explain the migration and partner access in the insurance submission when relevant to the questions asked. Compare the cyber policy's insured entities and service-provider provisions with the real arrangement. If a donor or partner requests an insurance representation, confirm the wording before promising protection. Integration planning supports a clearer response to an incident but does not prove security or guarantee that any resulting loss falls within coverage.

What could a claim look like?

Hypothetical examples, not actual claims. Policy wording and the facts determine coverage.

Example: Hypothetical: combined-program director appointment

Two Indiana programs consolidate under one nonprofit. A former coordinator alleges unfair treatment in the director selection and challenges a later change in schedule. The nonprofit preserves interview materials and identifies which entity employed the coordinator at each stage. It reviews EPLI notice and prior-acts wording separately from a board member's criticism of the consolidation vote. Neither the new program name nor a shared executive establishes that all allegations fall within one policy.

Example: Hypothetical: legacy intake access

After an Indiana nonprofit migrates its intake records, a former volunteer account remains active on the old platform. Staff discover unexpected downloads and investigate the information involved. They consult cyber response terms and the identified Indiana breach provision through legal advisers, without assuming every downloaded field requires the same response. A partner's role in maintaining the old account is documented but not treated as proof that the partner's insurer will pay.

What else do buyers ask?

Are all volunteers insured by D&O?

Not necessarily. Compare the definition of insured person with each volunteer's capacity and authority. Serving the mission does not by itself establish that a particular individual or activity falls within the proposed form.

Does indemnification mean the insurer pays first?

No. Organizational indemnification and insurance are different arrangements. Review advancement, reimbursement, retention and consent provisions rather than assuming that the nonprofit's promise determines the insurer's payment sequence.

Should the old program name remain in the submission?

Explain former names and operating histories where relevant to the application. The broker needs enough information to evaluate entity and prior-acts questions; a rebranding alone does not answer them.

Can one contact manage all notices?

A coordinator can track notices, but should use each policy's instructions and confirm receipt. Reporting an incident under cyber should not be assumed to notify EPLI or D&O automatically.

Sources

  1. Indiana government — www.in.gov — State employment law
  2. Indiana government — www.in.gov — Enforcement agency
  3. Indiana government — www.in.gov — State charge-filing period
  4. U.S. Equal Employment Opportunity Commission — Federal charge-filing guidance
  5. Indiana government — iga.in.gov — Director indemnification
  6. Indiana government — iga.in.gov — Breach-notification law
  7. U.S. Department of Labor — Meeting your fiduciary responsibilities
  8. Federal Trade Commission — Data breach response: a guide for business

General information, not legal advice or a promise of coverage. Provident Financial Group is an independent insurance agency, not a carrier. Consult qualified counsel about legal requirements; the issued policy controls insurance coverage.